MAL-2025-172769 Malicious code in alvino-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2046bdc1d9658658cbc26e65152a21ae040284ca04af748feef8f2d1cde8a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177797 Malicious code in polymer-avafifa-fagsabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b9c7eda63f5f6a1bad3872e11d23d8b067eaae0dd6a4a3f89aceba8e498c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177642 Malicious code in polymer-afaj-rofidsfafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62053a4159d941e308b6e40ce74c80522315fdc891cef02a3a977523a4e2b985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeddb62a33315800a1caa8cc8d3842c532b7ca1c8237d1c8058a674a88aef572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimau-upuasanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21e54cc212c9c095463fd8627ca49d6c2dfabeab030b28514319b2446f0cab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166472 Malicious code in sunderlan-uylud-vamuiusabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b735e32610965623368fb5f122855679c6dc8c72d3c27dcec588a3e03fcb8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-warp-gacrux-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a5669875c0e01775ff49e5731dec424fd931df475451a47ff37a2f982d8829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-pino-semantic-ui-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0375a5c9197ee371bf131bdbf40740f8aaffba603a8d2704f59bc7590699c75c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-takokak72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e081668a8b3d3af1fb428929750452b6438bc1e29c0830815432fe3cf2adf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119344 Malicious code in damaged_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea58db6d183d7074f3b5b224f970893f90db224c163fee25f34ccbe5103226fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117438 Malicious code in tiara-sambalado69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86c2bdb4b2702e43cecce71df0cc85eba7f3cd820d2195098c07d68b2232864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_crocodile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcc2e1614a4df68991f600cf3120a4558fcd8086d730564871f1b47a09b73d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109991 Malicious code in umi-mendoan45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17035ca3531c97d5a0ebfbf9cd0f883737807a0511f5d28e77f1271cd3728f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-tapai64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c668ea28d96f038bc3e073045c1db958e2883b4f5861de7ea53e926959d1b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100700 Malicious code in combative_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2026bb00675c8dbfd010c2cc5dc772cfecc57e3497c8c10d85745556129fe58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101516 Malicious code in dian-jamblang42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8df54130d4c48cde908bc61fcb458ee91945ba5285d23c53f289e880b252bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lapis50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210f11a47a17c8f020e2ed994b9e4c28a34c713ae41d5f4f5425fd26622abe55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe48b6f3ab37dca429255a44b6bd34fad91a0552aef4e2fca40dafcdb0c170ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90228 Malicious code in rival_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dc34a89a2e908c5d3c71b12b6cea9da418b1874857582c89c244d69a09947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78088 Malicious code in fajar-botok61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bbdd30ee39202f5e2ec0ea1f47cb006f2609d912e02c8e0b16d476339f2d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...